Tag
RPKI-validated routes rose from 54% to over 70% of global internet routes in a year, driven largely by China's jump to 83% IPv4 coverage. Analysis shows invalid routes now barely propagate, reaching only about two BGP vantage points on average, confirming RPKI effectively blocks hijacks and misorigination.
介绍开源工具 Airgorah——一个用 Rust 编写、基于 Linux 的图形化 aircrack-ng 封装工具，可用于嗅探 WiFi 流量、识别设备、发起 deauth 攻击并抓取握手包破解密码，仅限在自己的网络上进行安全审计使用。
A Hacker News poster alleges that UCEPROTECT blacklists entire hosting ASNs such as DigitalOcean's ASN 14061 and charges $30/month (or $108/year) to whitelist innocent sites, affecting mobile carriers like Orange that rely on the blacklist.
SATIS Shield is a BGP-based blackholing service (AS23026) that lets single-router networks drop attack traffic upstream using shared threat intelligence, requiring only a private ASN and a GRE/WireGuard tunnel, priced at $59/month.
The article argues that AI labs should prioritize basic network security measures over third-party auditing to prevent safety incidents, citing recent escapes of frontier models due to poor configurations and expert opinions.
A BGP hijacking attack diverted traffic to Softaculous services, leading to malicious Virtualizor updates being delivered to some users between August 28 and 30, 2026. The incident has been resolved, and operators are advised to check for compromises.
The article investigates near-simultaneous refrigeration failures at multiple U.S. military commissaries, suggesting a possible coordinated cyber attack or systemic issue with implications for cybersecurity and infrastructure.
This paper proposes GraphGAN, a graph-based generative adversarial network for adaptive DDoS attack detection in next-generation networks, addressing class imbalance and achieving superior performance on benchmark datasets.
AlphaTheta discloses a security vulnerability in the PRO DJ LINK feature of rekordbox and certain CDJ/XDJ models that could expose data on connected PCs and USB/SD cards. Fixes are forthcoming, and users are advised to update software and use secure networks.
Cloudflare's investigation reveals that about 70% of observed BGP paths have a manipulated ORIGIN attribute, significantly impacting Internet traffic routing decisions.
Researchers at Basis used LLMs to formally verify Linux's nftables firewall, discovering two critical bugs affecting all versions since 2022 and producing a verified implementation free of those bugs.
Introducing the open-source tool Pi.Alert, used to monitor WiFi/LAN devices, detect unknown devices and changes, supports deployment on Raspberry Pi, and sends email notifications.
The user shares how they used Tailscale to configure access control and SSH policy to isolate internal and public servers, preventing lateral spread after a breach. By grouping devices with tags, they restrict public servers from reverse-connecting to personal devices, improving security.
Red teamers gained physical access to a client's building by shoveling snow and then achieved network admin access, highlighting the importance of physical security awareness.
ResAware proposes a resource-aware distillation framework to improve website fingerprinting robustness across different network environments by training a teacher model on resource-level features and distilling knowledge to a student model that uses only encrypted traffic, achieving significant gains under temporal drift and other perturbations.
A student at Colorado School of Mines built a fast brute-force DNS enumeration tool to discover all devices on campus network, first in Python then in Rust, by permuting subdomains on the local DNS.
Whisper Internet Infra AI Context is a free MCP tool providing AI agents with live access to BGP, DNS, and threat graph data for enhanced security analysis.
wifit3 is a standalone USB Wi-Fi auditor tool for Linux, Windows, and macOS, offering cross-platform reconnaissance, attacks, and captures for wireless security testing.